[PHP]AES加密----PHP服务端和Android客户端

本文采取128位AES-CBC模式加密和解密

1.首先对服务端安装mcrypt：

sudo apt-get install php5-mcrypt php5-dev

sudo php5enmod mcrypt

sudo service apache2 restart

2.PHP服务端AES加密类代码

class MCrypt
{
private $iv = 'fedcba9876543210'; //初始化向量iv
public $key;//AES加密的密钥key
//将密钥$key传进本类
function __construct($key)
{
$this->key=$key;
}
//加密
function encrypt($str) {
//$key = $this->hex2bin($key);
$iv = $this->iv;
$td = mcrypt_module_open('rijndael-128', '', 'cbc', $iv);
mcrypt_generic_init($td, $this->key, $iv);
$encrypted = mcrypt_generic($td, $str);
\OCP\Util::writeLog('***MCrypt $key***', $this->key, \OCP\Util::ERROR);
mcrypt_generic_deinit($td);
mcrypt_module_close($td);
return bin2hex($encrypted);
}
//解密
function decrypt($code) {
//$key = $this->hex2bin($key);
$code = $this->hex2bin($code);
$iv = $this->iv;
$td = mcrypt_module_open('rijndael-128', '', 'cbc', $iv);
mcrypt_generic_init($td, $this->key, $iv);
$decrypted = mdecrypt_generic($td, $code);
mcrypt_generic_deinit($td);
mcrypt_module_close($td);
return utf8_encode(trim($decrypted));
}
protected function hex2bin($hexdata) {
$bindata = '';
for ($i = 0; $i < strlen($hexdata); $i += 2) {
$bindata .= chr(hexdec(substr($hexdata, $i, 2)));
}
return $bindata;
}
}

4.PHP服务端调用ASE加密类代码：

$key="";//自己添加AES密钥
//将加密的key传进AES类
$mcrypt = new MCrypt($key);
//对数据库中的密码进行AES加密
$psw = $mcrypt->encrypt();

5.Android服务端AES解密代码：

在Android中创建一个AESUtil类，需要用时调用

/**
* AES解密：
* 对服务器发回来的密码进行解密
*
*/
import java.io.UnsupportedEncodingException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;

import javax.crypto.Cipher;
import javax.crypto.NoSuchPaddingException;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;

import com.pcloud.android.ui.activity.FirstAuthenActivity;

public class AESUtil {
private String iv = "fedcba9876543210";//虚拟的 iv。和服务端要保持一致
private IvParameterSpec ivspec;
private SecretKeySpec keyspec;
private Cipher cipher;

//   private String SecretKey = "";//虚拟的 密钥
String msgToken=FirstAuthenActivity.msgToken;
//String msgUrl=FirstAuthenActivity.msgUrl;
String msgRandom=FirstAuthenActivity.msgRandom;

//把随机数和tokenid进行MD5操作来作为AES密钥，和服务端的AES加密密钥要保持一致
String SecretKey=stringToMD5(msgToken+msgRandom);

public AESUtil()
{
ivspec = new IvParameterSpec(iv.getBytes());

keyspec = new SecretKeySpec(SecretKey.getBytes(), "AES");

try {
cipher = Cipher.getInstance("AES/CBC/NoPadding");
} catch (NoSuchAlgorithmException e) {
// TODO Auto-generated catch block
e.printStackTrace();
} catch (NoSuchPaddingException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}

public byte[] encrypt(String text) throws Exception
{
if(text == null || text.length() == 0)
throw new Exception("Empty string");

byte[] encrypted = null;

try {
cipher.init(Cipher.ENCRYPT_MODE, keyspec, ivspec);

encrypted = cipher.doFinal(padString(text).getBytes());
} catch (Exception e)
{
throw new Exception("[encrypt] " + e.getMessage());
}

return encrypted;
}

public byte[] decrypt(String code) throws Exception
{
if(code == null || code.length() == 0)
throw new Exception("Empty string");

byte[] decrypted = null;

try {
cipher.init(Cipher.DECRYPT_MODE, keyspec, ivspec);

decrypted = cipher.doFinal(hexToBytes(code));
} catch (Exception e)
{
throw new Exception("[decrypt] " + e.getMessage());
}
return decrypted;
}

public static String bytesToHex(byte[] data)
{
if (data==null)
{
return null;
}

int len = data.length;
String str = "";
for (int i=0; i<len; i++) {
if ((data[i]&0xFF)<16)
str = str + "0" + java.lang.Integer.toHexString(data[i]&0xFF);
else
str = str + java.lang.Integer.toHexString(data[i]&0xFF);
}
return str;
}

public static byte[] hexToBytes(String str) {
if (str==null) {
return null;
} else if (str.length() < 2) {
return null;
} else {
int len = str.length() / 2;
byte[] buffer = new byte[len];
for (int i=0; i<len; i++) {
buffer[i] = (byte) Integer.parseInt(str.substring(i*2,i*2+2),16);
}
return buffer;
}
}

private static String padString(String source)
{
char paddingChar = ' ';
int size = 16;
int x = source.length() % size;
int padLength = size - x;

for (int i = 0; i < padLength; i++)
{
source += paddingChar;
}

return source;
}

6.Android客户端调用AES类进行解密：

//调用AES解密
AESUtil mcrypt;
mcrypt = new AESUtil();
try {
//对收到的密码进行AES解密
String decrypted = new String( mcrypt.decrypt( rec[1]) );
Log.d("解密的：",decrypted);
} catch (Exception e) {
// TODO 自动生成的 catch 块
e.printStackTrace();
}